Clause 6.1.2.2: Assessment of OH&S risks and other risks to the OH&S MS
Set up, run and keep processes that assess the OH&S risks arising from hazards that have been identified, with regard to how effective the current controls are, and that assess other risks connected with setting up, running, operating and maintaining the OH&S MS..
What clause 6.1.2.2 asks
Set up, run and keep processes that assess the OH&S risks arising from hazards that have been identified, with regard to how effective the current controls are, and that assess other risks connected with setting up, running, operating and maintaining the OH&S MS.
A risk assessment is only useful if it says how effective the controls already in place really are. Assuming a control works is the most common way a low score is manufactured.
Draft 6.1.2 Hazard identification and assessment of OH&S risks and OH&S opportunities, from clause 6.1.2.2. The draft folds this into 6.1.2 and, according to the public summaries, makes it explicit that the results of the assessment must be documented as well as the methodology and criteria. It also expects the interaction between multiple hazards to be considered.
Evidence for clause 6.1.2.2
An auditor will pick a control marked effective and ask for the evidence that it is, then look for a hazard where two exposures combine.
- Risk assessmentDocumented risk assessment methodology with defined criteria
- Risk assessmentRisk register considering effectiveness of existing controls
- Risk assessmentSeparate assessment of risks to the OH&S MS itself
- Risk assessmentReviewer competence records
Where clause 6.1.2.2 commonly fails
- Existing controls assumed effective without verification
- OH&S MS risks not separately considered
What to do about clause 6.1.2.2 before the revision
Test three controls that the register treats as effective. Record the test and the result. Add a combined-exposure row, such as heat plus physical work plus lone working. Document the assessment results, not just the method.
What the record shows for clause 6.1.2.2
An auditor working on clause 6.1.2.2 will start with Documented risk assessment methodology with defined criteria. The failure this record sees most often is Existing controls assumed effective without verification. Both are carried into the kit as row 11, with an owner field and a dated action.
Read across from clause 6.1.2.2
Read the next clause in the group, or open the full index. The revision map shows the draft structure.
Source for clause 6.1.2.2: ISO 45001:2018, clause 6.1.2.2, retrieved 18 October 2026. The draft note rests on the public DIS contents and the two named summaries; the requirement, evidence and gaps are written from the held clause record. Every source.